Microsoft on Wednesday said that a user containment feature in Microsoft Defender for Endpoint helped thwart a « large-scale remote encryption attempt » made by Akira ransomware actors targeting an unknown industrial organization in early June 2023.
The tech giant’s threat intelligence team is tracking the operator as Storm-1567.
The attack leveraged devices that were not onboarded to Microsoft

Microsoft on Wednesday said that a user containment feature in Microsoft Defender for Endpoint helped thwart a « large-scale remote encryption attempt » made by Akira ransomware actors targeting an unknown industrial organization in early June 2023.
The tech giant’s threat intelligence team is tracking the operator as Storm-1567.
The attack leveraged devices that were not onboarded to Microsoft